AWS Certified Cloud Practitioner (CLF-C02) Exam Prep | 500+
Most Tested QUESTIONs with Correct Answers & Expert
Rationales 2026/2027
QUESTION 1
Which AWS tool or feature provides a visual interface and customizable
cost estimates for new architectural designs before deployment?
• A. AWS Cost Explorer
• B. AWS Pricing Calculator
• C. AWS Budgets
• D. AWS Trusted Advisor
Correct Answer: B. AWS Pricing Calculator
Detailed Rationale: The AWS Pricing Calculator lets you explore AWS
services and create customized cost estimates for your architectural use
cases before deploying resources. Cost Explorer tracks historical
spending, Budgets monitors cost thresholds, and Trusted Advisor
provides optimization recommendations.
QUESTION 2
According to the AWS Shared Responsibility Model, which component is
managed entirely by AWS?
• A. Guest operating system configuration and patches
• B. Customer data encryption and access management
• C. Physical security of data centers and hardware infrastructure
, • D. Application code deployment and security testing
Correct Answer: C. Physical security of data centers and hardware
infrastructure
Detailed Rationale: Under the shared responsibility model, AWS is
responsible for security of the cloud, which includes the physical
infrastructure, data centers, power, cooling, and hardware. The
customer is responsible for security in the cloud, including operating
systems, data, and applications.
QUESTION 3
Which Amazon EC2 pricing model provides a commitment to a
consistent amount of compute usage (measured in dollar-per-hour
spend) for a 1-year or 3-year term in exchange for significant discounts?
• A. Spot Instances
• B. On-Demand Instances
• C. Dedicated Hosts
• D. AWS Savings Plans
Correct Answer: D. AWS Savings Plans
Detailed Rationale: AWS Savings Plans provide flexibility while offering
lower prices than On-Demand instances in exchange for a commitment
to a consistent amount of compute usage (measured in USD/hour) for a
1-year or 3-year period.
QUESTION 4
Which Amazon S3 storage class offers the lowest-cost storage for long-
term data archiving with retrieval times ranging from 3 to 5 hours?
, • A. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
• B. Amazon S3 Glacier Flexible Retrieval
• C. Amazon S3 Glacier Deep Archive
• D. Amazon S3 Intelligent-Tiering
Correct Answer: C. Amazon S3 Glacier Deep Archive
Detailed Rationale: Amazon S3 Glacier Deep Archive is the lowest-cost
storage class in S3, designed for data that is accessed once or twice a
year and can tolerate retrieval times of 3 to 5 hours.
QUESTION 5
What is the primary function of an AWS IAM (Identity and Access
Management) Policy?
• A. To route global internet traffic to application endpoints
• B. To define permissions and specify who has access to what AWS
resources
• C. To encrypt data at rest across relational databases
• D. To monitor network traffic flows across subnets
Correct Answer: B. To define permissions and specify who has access to
what AWS resources
Detailed Rationale: An IAM policy is a document that formally defines
permissions. When attached to an identity (user, group, or role) or
resource, it dictates what actions are allowed or denied on specific AWS
resources.
QUESTION 6
, Which VPC component allows resources within a private subnet to
connect to the internet for updates while preventing unsolicited
inbound internet traffic?
• A. Internet Gateway
• B. NAT Gateway
• C. Virtual Private Gateway
• D. Customer Gateway
Correct Answer: B. NAT Gateway
Detailed Rationale: A Network Address Translation (NAT) gateway
enables instances in a private subnet to initiate outbound traffic to the
internet (such as for software patches), while blocking inbound
connections initiated from the outside.
QUESTION 7
Which fully managed AWS relational database service automatically
handles database provisioning, patching, backups, and multi-AZ
replication?
• A. Amazon DynamoDB
• B. Amazon Redshift
• C. Amazon RDS (Relational Database Service)
• D. Amazon Athena
Correct Answer: C. Amazon RDS (Relational Database Service)
Detailed Rationale: Amazon RDS simplifies relational database
management in the cloud by automating time-consuming
Most Tested QUESTIONs with Correct Answers & Expert
Rationales 2026/2027
QUESTION 1
Which AWS tool or feature provides a visual interface and customizable
cost estimates for new architectural designs before deployment?
• A. AWS Cost Explorer
• B. AWS Pricing Calculator
• C. AWS Budgets
• D. AWS Trusted Advisor
Correct Answer: B. AWS Pricing Calculator
Detailed Rationale: The AWS Pricing Calculator lets you explore AWS
services and create customized cost estimates for your architectural use
cases before deploying resources. Cost Explorer tracks historical
spending, Budgets monitors cost thresholds, and Trusted Advisor
provides optimization recommendations.
QUESTION 2
According to the AWS Shared Responsibility Model, which component is
managed entirely by AWS?
• A. Guest operating system configuration and patches
• B. Customer data encryption and access management
• C. Physical security of data centers and hardware infrastructure
, • D. Application code deployment and security testing
Correct Answer: C. Physical security of data centers and hardware
infrastructure
Detailed Rationale: Under the shared responsibility model, AWS is
responsible for security of the cloud, which includes the physical
infrastructure, data centers, power, cooling, and hardware. The
customer is responsible for security in the cloud, including operating
systems, data, and applications.
QUESTION 3
Which Amazon EC2 pricing model provides a commitment to a
consistent amount of compute usage (measured in dollar-per-hour
spend) for a 1-year or 3-year term in exchange for significant discounts?
• A. Spot Instances
• B. On-Demand Instances
• C. Dedicated Hosts
• D. AWS Savings Plans
Correct Answer: D. AWS Savings Plans
Detailed Rationale: AWS Savings Plans provide flexibility while offering
lower prices than On-Demand instances in exchange for a commitment
to a consistent amount of compute usage (measured in USD/hour) for a
1-year or 3-year period.
QUESTION 4
Which Amazon S3 storage class offers the lowest-cost storage for long-
term data archiving with retrieval times ranging from 3 to 5 hours?
, • A. Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
• B. Amazon S3 Glacier Flexible Retrieval
• C. Amazon S3 Glacier Deep Archive
• D. Amazon S3 Intelligent-Tiering
Correct Answer: C. Amazon S3 Glacier Deep Archive
Detailed Rationale: Amazon S3 Glacier Deep Archive is the lowest-cost
storage class in S3, designed for data that is accessed once or twice a
year and can tolerate retrieval times of 3 to 5 hours.
QUESTION 5
What is the primary function of an AWS IAM (Identity and Access
Management) Policy?
• A. To route global internet traffic to application endpoints
• B. To define permissions and specify who has access to what AWS
resources
• C. To encrypt data at rest across relational databases
• D. To monitor network traffic flows across subnets
Correct Answer: B. To define permissions and specify who has access to
what AWS resources
Detailed Rationale: An IAM policy is a document that formally defines
permissions. When attached to an identity (user, group, or role) or
resource, it dictates what actions are allowed or denied on specific AWS
resources.
QUESTION 6
, Which VPC component allows resources within a private subnet to
connect to the internet for updates while preventing unsolicited
inbound internet traffic?
• A. Internet Gateway
• B. NAT Gateway
• C. Virtual Private Gateway
• D. Customer Gateway
Correct Answer: B. NAT Gateway
Detailed Rationale: A Network Address Translation (NAT) gateway
enables instances in a private subnet to initiate outbound traffic to the
internet (such as for software patches), while blocking inbound
connections initiated from the outside.
QUESTION 7
Which fully managed AWS relational database service automatically
handles database provisioning, patching, backups, and multi-AZ
replication?
• A. Amazon DynamoDB
• B. Amazon Redshift
• C. Amazon RDS (Relational Database Service)
• D. Amazon Athena
Correct Answer: C. Amazon RDS (Relational Database Service)
Detailed Rationale: Amazon RDS simplifies relational database
management in the cloud by automating time-consuming
